Políticas de seguridad informática para el teletrabajo en la empresa Bioalimentar

Abstract

At present due to the pandemic caused by the COVID-19 many companies are in the need to incorporate new ways of working to ensure business continuity and thus not be in the need to dismiss staff or reach the point of closing its doors, as is the case of some companies in Ecuador and in the world. Thanks to the advance of technologies, new ways of guaranteeing the continuity of the activities of the employees in the companies arise, one of them is the telework that allows the realization of the activities of the employees from the comfort of their homes or from any place. A problem when implementing telework, which arose during the pandemic, was the mismanagement and hasty implementation of telework without taking into account certain aspects such as: the technological infrastructure of the companies, work equipment without adequate configurations and without security patches, among others; that when not taken into account can mean a very serious problem for companies. Taking into account the problems generated at the level of computer security around the world and in Ecuador, by the bad implementation of telework is presented the following project focused on computer security in telework and the policies that should exist in the work in order to ensure optimal security and the correct implementation of telework in companies. In the development of the project different evaluations were made to observe the current state in which the company Bioalimentar is by using tools such as InsightVM, Zenmap, OWASP ZAP, among others, in the same way social engineering attacks were made to observe how the staff acts before an attack, and several techniques of Ethical Hacking were applied to validate the developed policies and thus verify the important need for policies that help for a correct implementation of teleworking in companies.